# CVEs published 2005-01-29

45 CVEs were published on January 29, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-1999-1572](https://cve.now/CVE-1999-1572.md): cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) (no CVSS)
- [CVE-2004-0467](https://cve.now/CVE-2004-0467.md): Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packe (no CVSS)
- [CVE-2004-0555](https://cve.now/CVE-2004-0555.md): Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2004-1057](https://cve.now/CVE-2004-1057.md): Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM\_IO flag, which causes incorrect reference counts (no CVSS)
- [CVE-2004-1124](https://cve.now/CVE-2004-1124.md): Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized ac (no CVSS)
- [CVE-2004-1150](https://cve.now/CVE-2004-1150.md): Stack-based buffer overflow in the in\_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// U (no CVSS)
- [CVE-2004-1184](https://cve.now/CVE-2004-1184.md): The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2004-1185](https://cve.now/CVE-2004-1185.md): Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames (no CVSS)
- [CVE-2004-1186](https://cve.now/CVE-2004-1186.md): Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash). (no CVSS)
- [CVE-2004-1340](https://cve.now/CVE-2004-1340.md): Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam\_radius\_auth.conf set to be world-readable, which allows local user (no CVSS)
- [CVE-2004-1380](https://cve.now/CVE-2004-1380.md): Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to sp (no CVSS)
- [CVE-2004-1381](https://cve.now/CVE-2004-1381.md): Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originall (no CVSS)
- [CVE-2005-0006](https://cve.now/CVE-2005-0006.md): The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop). (no CVSS)
- [CVE-2005-0007](https://cve.now/CVE-2005-0007.md): Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (applicat (no CVSS)
- [CVE-2005-0008](https://cve.now/CVE-2005-0008.md): Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption." (no CVSS)
- [CVE-2005-0009](https://cve.now/CVE-2005-0009.md): Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (appl (no CVSS)
- [CVE-2005-0010](https://cve.now/CVE-2005-0010.md): Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by trigge (no CVSS)
- [CVE-2005-0015](https://cve.now/CVE-2005-0015.md): diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. (no CVSS)
- [CVE-2005-0033](https://cve.now/CVE-2005-0033.md): Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (cr (no CVSS)
- [CVE-2005-0034](https://cve.now/CVE-2005-0034.md): An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a (no CVSS)
- [CVE-2005-0069](https://cve.now/CVE-2005-0069.md): The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on tempo (no CVSS)
- [CVE-2005-0071](https://cve.now/CVE-2005-0071.md): vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files. (no CVSS)
- [CVE-2005-0072](https://cve.now/CVE-2005-0072.md): zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files. (no CVSS)
- [CVE-2005-0077](https://cve.now/CVE-2005-0077.md): The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file. (no CVSS)
- [CVE-2005-0078](https://cve.now/CVE-2005-0078.md): The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with (no CVSS)
- [CVE-2005-0079](https://cve.now/CVE-2005-0079.md): Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session. (no CVSS)
- [CVE-2005-0084](https://cve.now/CVE-2005-0084.md): Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packe (no CVSS)
- [CVE-2005-0086](https://cve.now/CVE-2005-0086.md): Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possib (no CVSS)
- [CVE-2005-0102](https://cve.now/CVE-2005-0102.md): Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrar (no CVSS)
- [CVE-2005-0115](https://cve.now/CVE-2005-0115.md): Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file wi (no CVSS)
- [CVE-2005-0125](https://cve.now/CVE-2005-0125.md): The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via (no CVSS)
- [CVE-2005-0126](https://cve.now/CVE-2005-0126.md): ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap. (no CVSS)
- [CVE-2005-0127](https://cve.now/CVE-2005-0127.md): Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardw (no CVSS)
- [CVE-2005-0140](https://cve.now/CVE-2005-0140.md): Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import libra (no CVSS)
- [CVE-2005-0141](https://cve.now/CVE-2005-0141.md): Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" (no CVSS)
- [CVE-2005-0142](https://cve.now/CVE-2005-0142.md): Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permission (no CVSS)
- [CVE-2005-0143](https://cve.now/CVE-2005-0143.md): Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which c (no CVSS)
- [CVE-2005-0144](https://cve.now/CVE-2005-0144.md): Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an (no CVSS)
- [CVE-2005-0145](https://cve.now/CVE-2005-0145.md): Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Jav (no CVSS)
- [CVE-2005-0146](https://cve.now/CVE-2005-0146.md): Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates (no CVSS)
- [CVE-2005-0147](https://cve.now/CVE-2005-0147.md): Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, whic (no CVSS)
- [CVE-2005-0148](https://cve.now/CVE-2005-0148.md): Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet (no CVSS)
- [CVE-2005-0149](https://cve.now/CVE-2005-0149.md): Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could (no CVSS)
- [CVE-2005-0150](https://cve.now/CVE-2005-0150.md): Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security con (no CVSS)
- [CVE-2005-0162](https://cve.now/CVE-2005-0162.md): Stack-based buffer overflow in the get\_internal\_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.